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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A secure on-line system for printing value bearing items 
(VBI) comprising: 

a client system configured to interface with a plurality of users; and 
a server system configured to communicate with the client system over a communication 
network comprising: 

a secure database remote from the users including a data record for each of the 
users , wherein each data record is protected by a private key ; and 

a plurality of stateless cryptographic devices, each of the plurality of stateless 
cryptographic devices configured to perform authentication, processing value for the VBI, and 
generation of indicia data for the plurality of users, wherein before each of the authentication, 
processing value, and generation of indicia data for a given user is performed, an available 
cryptographic device in the server system retrieves the data record for the given user directly 
from the database and uses the private key to verify the retrieved data record, and wherein after 
the authentication, processing value, and generation of indicia data are performed, the client 
system instructs a printer to print the VBI. 

2. -4. (Cancelled) 

5. (Previously Presented) The secure on-line system of claim 1, further comprising 
computer executable code for an asynchronous dynamic password verification to terminate a 
user session if the password authentication fails. 

6. (Previously Presented) The secure on-line system of claim 1, wherein the database 
stores a first set of one or more last database transactions and each of the cryptographic devices 
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stores a second set of one or more last database transactions for comparison with the first set of 
one or more last database transactions stored in the database to verify each database transaction. 

7. (Previously Presented) The secure on-line system of claim 6, wherein each of the 
cryptographic devices prevents further database transactions if the second set of one or more last 
transaction stored in the cryptographic device does not match with the first set of one or more 
last transaction stored in the database. 

8. (Previously Presented) The secure on-line system of claim 6, wherein the database 
stores a table including the respective information about a last transaction and a verification 
module to compare the information saved in the module with the information saved in the 
database. 

9. (Previously Presented) The secure on-line system of claim 1, further comprising a 
back up database server connected to the server system for periodically backing up the data 
stored in the database in a back up database. 

10. (Previously Presented) The secure on-line system of claim 9, further comprising a 
cryptographically protected transaction log stored in the back up database. 

11. -16. (Cancelled) 

17. (Previously Presented) The secure on-line system of claim 1, wherein each of the 
cryptographic devices includes a data validation subsystem to verify that data is up to date and an 
auto-recovery subsystem for allowing the device to automatically re-synchronize the device with 
the data. 

18. -21. (Cancelled) 



-3- 



Appln No. 09/690,796 

Amdt date July 18, 2008 

Reply to Office action of February 25, 2008 

22. (Previously Presented) The secure on-line system of claim 1, wherein each of the 
cryptographic devices includes a computer executable code for detecting errors and preventing a 
compromise of data or critical cryptographic security parameters as a result of the errors. 

23. -41. (Cancelled) 

42. (Previously Presented) The secure on-line system of claim 1, wherein the server 
system further comprises one or more of a postal server subsystem, a provider server subsystem, 
an e-commerce subsystem, a staging subsystem, a client support subsystem, a decision support 
subsystem, a SMTP subsystem, an address matching service subsystem, a SSL proxy server 
subsystem, and a web server subsystem. 

43. -49. (Cancelled) 

50. (Currently Amended) A method for securely printing value-bearing items (VBI) 
via a communication network including a client system, and a server system including a plurality 
of stateless cryptographic devices, the method comprising the steps of: 

interfacing with a plurality of users remote from the plurality of stateless cryptographic 
devices, via the client system; 

communicating with the client system over the communication network; 

protecting a data record for each of the plurality of users using a private key; 

storing [[a]] the protected data record for each of the plurality of users in a database 
remote from the plurality of users; 

directly retrieving the data record for a given user from the database; 

using the private key to verify the retrieved data record; 

[[for]] authenticating the given user, processing value for the VBI and generating indicia 
data for the given user, by any available cryptographic device of the plurality of stateless 
cryptographic devices; and 
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updating the data record and storing the updated data record for the given user in the 
database; and 

printing the VBI by the client system. 

51. (Previously Presented) The method of claim 50, further comprising the step of 
encrypting each database transaction. 

52. (Previously Presented) The method of claim 50, further comprising the steps of 
storing one or more last database transactions in the database; 

storing one or more last database transactions in the cryptographic device; and 
comparing the one or more last database transactions stored in the database with the one 

or more last database transactions stored in the available cryptographic device to verify each 

database transaction. 

53. -54. (Cancelled) 

55. (Previously Presented) The method of claim 50, further comprising the steps of 
storing one or more last database transactions in the database, storing one or more last database 
transactions in the available cryptographic device for comparison with the one or more last 
database transactions stored in the database to verify each database transaction. 

56. (Previously Presented) The method of claim 55, further comprising the step of 
preventing further database transactions if the one or more last transaction stored in the 
cryptographic device_does not match with the one or more last transaction stored in the database. 

57. (Previously Presented) The method of claim 50, further comprising the step of 
storing a table including the respective information about a last transaction and comparing the 
information saved in the available cryptographic device with the information saved in the 
database. 
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58. (Original) The method of claim 50, further comprising the step of backing up data 
stored in the database in a back up database. 

59. (Original) The method of claim 58, further comprising the step of recovering data 
from the back up database by decrypting an encrypted transaction log stored in the back up 
database. 

60. -121. (Cancelled) 
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